Active Directory Certificate Services Elevation of Privilege Vulnerability

A weakness in Windows Active Directory Certificate Services allows someone with basic access to gain higher privileges on the network. This is dangerous because it lets attackers move from limited accounts to powerful ones.

CWE-1390 weak authentication flaw in AD Certificate Services permits privilege escalation via network-based attack requiring prior authorization. Exploitation enables authenticated attackers to obtain elevated privileges within the domain, affecting confidentiality, integrity, and availability of directory services.